Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.
Questions tagged [pam]
752 questions
0
votes
0 answers
Modern alternative for pam_userdb (for use with vsftpd)
Quite some years ago, I setup a vsftpd server with virtual users, according to some howtos (still) to be found on the internet, using pam_userdb.
Like this: A file called /etc/pam.d/vsftpd.virtual:
#%PAM-1.0
auth required pam_userdb.so…
Tobias Leupold
- 161
- 10
0
votes
0 answers
CentOS 7 PAM / LDAP SSH/LOGIN user does not start in his home directory
On a CentOS 7 machine, users can use their LDAP credentials to connect to my servers.
The first time they do this, the pam_mkhomedir is doing its job well. The user's folder /home/jdoe is well created with the right permission.
The issue is that…
locobastos
- 15
- 1
- 1
- 8
0
votes
1 answer
CRON[83463]: Failure setting user credentials
I have a number of docker containers, all set up mostly identically, which successfully use cron to run nightly backup jobs.
I have another container, set up mostly identically, which tries, and fails, to use cron to run a nightly backup job.
I…
AlastairG
- 348
- 3
- 15
0
votes
1 answer
How to give web server user read permission to /etc/shadow file?
I would like to have a local Linux user to be able to be authenticated (login) using the Nginx PAM module. I am using a CentOS 7 server. Specifically the below is what I am trying to do...
The README for the ngx http auth pam module says:
Note that…
Nebek
- 21
- 6
0
votes
1 answer
/etc/login.defs settings not taken into account: password aging
The following is done on a Ubuntu 20.04 system.
This is the scenario where I am facing an issue:
I edit the password aging settings in the login.defs file
Then I change the password of the user with passwd user command
I check what settings were…
David
- 148
- 6
0
votes
1 answer
postfix/sasl/pam (mysql) auth error
I've followed tutorial on http://flurdy.com/docs/postfix/ to set up an email server, and most of it works (after switching from Courier to Dovecot). Just not sending email through SMTP. Sending with sendmail works.
This is what I see in…
Rudie
- 337
- 1
- 3
- 14
0
votes
0 answers
How does the sudoers option 'pam_session' correspond to PAM's 'session' type?
On a CentOS 7 system, I want to prevent lines such as
May 20 08:55:05 c090 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 20 08:55:05 c090 sudo: pam_unix(sudo:session): session closed for user root
May 20 08:55:06 c090…
loris
- 232
- 1
- 12
0
votes
0 answers
crond not loading /etc/pam.d/crond config
I have this PAM config in /etc/pam.d/crond:
auth required pam_env.so user_readenv=1
And this .pam_environment file:
_APP_PASSWORD DEFAULT=foo
And this test cronjob:
*/1 * * * * root env 2&>1 | logger -t debug_cron
I'm watching the logs with…
arielnmz
- 433
- 1
- 4
- 13
0
votes
1 answer
What causes - Error: pam...Multiple password values not supported?
On a linux server a user is unable to collect email using Microsoft Office. in /var/log/maillog I see this
Mar 1 20:49:48 nitrogen dovecot: auth-worker(15749): Error: pam(usern@example.com, 1.2.3.4,): Multiple password values not…
Steve
- 126
- 7
0
votes
1 answer
PAM in Linux: any way to skip local auth if remote/external auth DB returns a negative response?
Dear fellow system tinkerers,
an admin friend has asked me the following question:
On a number of network elements and servers, he's using remote authentication against a TACACS+ server. On some such proprietary appliances, the authentication only…
frr
- 261
- 3
- 8
0
votes
0 answers
Custom bash prompt failing when home directory is remote
0
I am trying to configure a custom prompt for RHEL 8 users. It works very nice when the users have local home directories.
However, I'm mounting home directories via pam_mount (nfs4). When ssh'ing to the machine, the prompt I made displays fine.…
francisaugusto
- 180
- 10
0
votes
0 answers
pam_tty_audit collect only TTY events
I'm trying to put together a TTY logging feature under Ubuntu 18.04 server and created /etc/pam.d/tty-audit with the following content:
session required pam_tty_audit.so enable=*
and added that to /etc/pamd.d/common-auth:
@include…
mc88
- 3
- 1
0
votes
0 answers
LDAP, NSLCD, and PAM Auth; Debian 10
I may be looking in the wrong place, and if so let me know and I'll find the correct place.
I've been struggling with the issue for the past week or so in my homelab set up. I followed the instructions here:…
0
votes
0 answers
Linux pam_time with groups
How do I allow /etc/security/time.conf to be able to restrict groups instead of users?
It works flawlessly with users but not with groups. I need to have multiple groups in my case.
SAAD3000
- 1
- 1
0
votes
1 answer
How to install pam_mount on RHEL 8?
I'm trying to install pam_mount on RHEL8 but keep getting this:
rror:
Problem: package pam_mount-2.16-10.el8.x86_64 requires hxtools, but none of the providers can be installed
- conflicting requests
- nothing provides perl(encoding) needed by…
francisaugusto
- 180
- 10